Move your 2FA accounts to Share Auth

A 2FA account comes down to a seed. Migrating it means moving it from the app where it lives today into the team vault, without copying it out by hand. Everything happens from Secrets, Add secret.

From Google Authenticator

Google Authenticator can export several accounts at once.

1. In the app, open Transfer accounts, then Export accounts, and select the ones to migrate.
2. The app displays one or more transfer QR codes.
3. In Share Auth, scan them with the camera or upload a screenshot.
4. Choose the accounts to add to the team.

From Bitwarden

Export your Bitwarden vault as unencrypted JSON or CSV, then import the file into Share Auth. It picks up every account whose TOTP key is stored as an otpauth://totp/ URI; a key entered on its own has to be added manually. Delete the export file once the import is done: it holds your secrets in plain text.

From Authy or Microsoft Authenticator

Neither lets you export seeds. For each account:

1. sign in to the service concerned and open its security settings;
2. choose to change authenticator app, or disable and then re-enable 2FA;
3. scan the new QR code into Share Auth;
4. enter the code shown by Share Auth to confirm.

The old app no longer works for that account, because the seed has changed.

From any service

When you turn on 2FA, a service displays a QR code and often a setup key. Share Auth accepts all three: the QR code (camera or image), the otpauth:// URI, or the key typed in by hand.

After the migration

• Check that each account shows the same code as the old app.
• Fill in the Sites field of each secret: the browser extension uses it to find the right account.
• Remove the accounts from personal phones, then invite the team with the right role.